jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]DownloadHelper[.]gen[.]c58000b28d2fe30554433f5af5b87192

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.c58000b28d2fe30554433f5af5b87192
Size 2.1MB
Sample261014-eymmqsf14l
SHA256 c4099692b2d77bd3cd00546919919af5a6aa3774a732c7bcc873eb17b6db27aa
MD5 c58000b28d2fe30554433f5af5b87192
SHA1 6f3932bb1f44306da5ddfc61e8dd121221a88015
SHA512 bbd79e7fb7104a6a45210fafec20a7cd149080ce6c4ffff7d3f896f4a5700ad8016809ce4715f4413c73da5915f5f479f1b509aabf95c5702562f8a2ec13527b
SSDEEP 24576:rhAYR2dvgn3bGHiWwGgUr/GJ1gBeEww3rfnLfxGwPl2dwEB:VzR2dvg3CCD3sgaPt+BB
TLSH
T11DA501106382E86BC5A776F264515B85102F6C6CAE63CC93B7C1BE0D1B705DF9222DAF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.c58000b28d2fe30554433f5af5b87192

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.c58000b28d2fe30554433f5af5b87192

.exe 2.1MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.c58000b28d2fe30554433f5af5b87192

IMPHASH ba108a168b47de7db2711b013a0cbf32
SHA256 c4099692b2d77bd3cd00546919919af5a6aa3774a732c7bcc873eb17b6db27aa
MD5 c58000b28d2fe30554433f5af5b87192
SHA1 6f3932bb1f44306da5ddfc61e8dd121221a88015
SHA512 bbd79e7fb7104a6a45210fafec20a7cd149080ce6c4ffff7d3f896f4a5700ad8016809ce4715f4413c73da5915f5f479f1b509aabf95c5702562f8a2ec13527b
SSDEEP 24576:rhAYR2dvgn3bGHiWwGgUr/GJ1gBeEww3rfnLfxGwPl2dwEB:VzR2dvg3CCD3sgaPt+BB
TLSH
T11DA501106382E86BC5A776F264515B85102F6C6CAE63CC93B7C1BE0D1B705DF9222DAF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

71020

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

FindWindowExW DrawFrameControl EnumDisplayMonitors DestroyIcon LoadIconW TrackMouseEvent FrameRect MapWindowPoints ScreenToClient GetCaretPos ShowCursor GetWindowContextHelpId SetScrollPos ScrollWindowEx GetDC WindowFromDC GetMenuInfo LoadMenuW GetDialogBaseUnits GetNextDlgTabItem GetDlgItemTextW GetDlgItem CreateDialogParamW CreateWindowExW RegisterClassW

opengl32

glDrawArrays glBlendFunc glGetIntegerv glGenTextures glFlush glEnable glDrawElements glBindTexture glDepthMask glDepthFunc glCopyTexImage2D glColorMask glClearColor glClear

winspool.drv

EnumJobsW

comctl32

FlatSB_SetScrollInfo FlatSB_SetScrollPos FlatSB_GetScrollPos FlatSB_GetScrollInfo CreateStatusWindowW CreateToolbarEx ImageList_Read ImageList_SetDragCursorImage ImageList_DragMove ImageList_DragLeave ImageList_BeginDrag ImageList_DrawIndirect ImageList_DrawEx ImageList_Replace ImageList_SetOverlayImage ImageList_GetBkColor ImageList_ReplaceIcon ImageList_GetImageCount ImageList_Create ord17 PropertySheetW InitializeFlatSB

kernel32

HeapFree LeaveCriticalSection GetCPInfo GetOEMCP GetACP IsValidCodePage LoadLibraryExW IsProcessorFeaturePresent GetModuleHandleW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess GetCurrentProcess RtlUnwind OutputDebugStringW GetStringTypeW HeapAlloc HeapReAlloc HeapSize LCMapStringW FlushFileBuffers GetConsoleCP GetConsoleMode SetStdHandle SetFilePointerEx WriteConsoleW CloseHandle IsDebuggerPresent OpenFileMappingW GetVersion GlobalAlloc GlobalFlags LocalAlloc VirtualAlloc GetProcessHeaps ExitProcess CreateIoCompletionPort EnterCriticalSection ReadFile SetFilePointer SetCommMask LocalFileTimeToFileTime CreateFileW GetFileAttributesExW FindNextFileW WaitNamedPipeW GetConsoleWindow GetCommandLineW RaiseException EncodePointer GetLastError SetLastError GetCurrentThreadId DecodePointer GetModuleHandleExW GetProcAddress MultiByteToWideChar WideCharToMultiByte GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep

Name

.text

Size

108KB

Virtual Size

107KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

612KB

Virtual Size

7.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

724B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.63g0de

Size

374KB

Virtual Size

373KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.18006r

Size

554KB

Virtual Size

554KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ie90

Size

145KB

Virtual Size

145KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

376KB

Virtual Size

375KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.c58000b28d2fe30554433f5af5b87192

user32

opengl32

winspool.drv

comctl32

kernel32

generic